Hayley May Studio Customer Privacy Notice

Last updated: May 2026

Introduction

At Hayley May Studio, your privacy matters. This Privacy Policy explains how we collect, use and protect your personal information when you visit our website, join our mailing list, purchase our products or services, or otherwise interact with our business.

By using this website, you agree to the practices described in this policy.

Who We Are

Hayley May Studio is a UK-based sole trader business providing digital products, courses, memberships, coaching and educational resources for female business owners in the UK and worldwide.

If you have any questions about this Privacy Policy or your personal data, you can contact us at:

Email: [email protected]

Information We Collect

We may collect and process the following personal information:

Information you provide directly

• Name

• Email address

• Billing information

• Purchase history

• Information submitted through forms, surveys or enquiries

• Messages or feedback you send to us

Information collected automatically

When you use our website, we may automatically collect:

• IP address

• Browser type and device information

• Website usage data

• Cookie and tracking data

• Pages visited and interactions with our website

How We Use Your Information

We use your information to:

• Provide and deliver our products, courses and services

• Process payments and transactions

• Communicate with you about your purchases or account

• Send newsletters, marketing and promotional emails (where you have consented)

• Improve our website, content and customer experience

• Respond to enquiries or support requests

• Protect against fraud or misuse of our services

• Meet legal and regulatory obligations

Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases for processing your information:

Contract

Where processing is necessary to provide products or services you have purchased.

Consent

Where you have opted in to receive marketing communications or agreed to cookies.

Legitimate Interests

Where processing is necessary for legitimate business purposes, including:

• Improving our services and website

• Website analytics and performance monitoring

• Customer support and communication

• Reasonable direct marketing

Legal Obligations

Where we are required to retain or disclose information to comply with applicable laws or regulations.

Marketing Communications

If you subscribe to our mailing list by submitting your email via one of our forms, we may send you emails about offers, updates, resources, products and services.

You can unsubscribe at any time using the unsubscribe link included in our emails or by contacting us directly.

We will never sell your personal information to third parties.

Payments

Payments are securely processed through third-party payment providers including Stripe. We do not store or have direct access to your full payment card details.

Please review the privacy policies of any payment providers you use.

Third-Party Platforms & Services

We use trusted third-party providers to help operate our business and deliver services. These may include:

• Stripe

• FEA Create

• Google Workspace

• Google Analytics

• Meta Pixel

• Coachvox

These providers may process personal data on our behalf and may store data outside the UK.

We take reasonable steps to ensure appropriate safeguards are in place where personal information is transferred internationally.

Cookies & Tracking Technologies

Our website may use cookies and similar technologies to:

• Improve website functionality

• Analyse website traffic and performance

• Personalise your experience

• Deliver relevant advertising and marketing

You can control or disable cookies through your browser settings.

Some features of the website may not function properly if cookies are disabled.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including legal, accounting and reporting obligations.

Typical retention periods include:

• Marketing subscriber data: until you unsubscribe or become inactive

• Financial and transaction records: up to 7 years for tax and accounting purposes

• Customer support enquiries: as reasonably necessary for support and legal purposes

Your Rights

Under UK GDPR, you may have the right to:

• Request access to your personal data

• Request correction of inaccurate data

• Request deletion of your data

• Object to certain processing activities

• Withdraw consent at any time

• Request transfer of your data to another provider

To exercise any of these rights, please contact us at [email protected].

We aim to respond to requests within one month.

Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, misuse, disclosure or loss.

However, no online transmission or storage system can be guaranteed completely secure.

Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those websites.

We encourage you to review their policies separately.

Children’s Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated revision date.

Your continued use of our website and services after changes are posted constitutes acceptance of those changes.

Contact & Complaints

If you have questions or concerns about this Privacy Policy or how your information is handled, please contact:

[email protected]

If you are not satisfied with our response, you may contact the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: https://ico.org.uk